CVE Database /
CVE-2025-14555
CVE · Medium
CVE-2025-14555 — Countdown Timer – Widget Countdown [widget-countdown] < 2.7.8
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2025-14555
|
Countdown Timer – Widget Countdown [widget-countdown] < 2.7.8 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.4
|
< 2.7.8
|
2.7.8 |
2026-01-09 |
—
|
CVE-2025-14555
The Countdown Timer – Widget Countdown plugin for WordPress contains a flaw that allows malicious users with contributor-level access or higher to embed unauthorized code into certain pages. This vulnerability arises from the plugin's failure to properly screen and sanitize input data, making it susceptible to stored cross-site scripting attacks. Affected versions of the plugin include all those up to 2.7.7.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings